On Wed, Jul 4, 2018 at 7:21 AM, Gordon Messmer <gordon.messmer(a)gmail.com> wrote:
>>
>> "915d709a-49b3-4928-8d5e-0f7e7a4de99a" #1: ignoring informational
>> payload NO_PROPOSAL_CHOSEN, msgid=00000000, length=12
>> Jul 03 18:50:10 xhost NetworkManager[900]: 003
>> "915d709a-49b3-4928-8d5e-0f7e7a4de99a" #1: received and ignored
>> informational message
>
>
> This seems like a message that shouldn't be ignored or else the other end
> is labelling it incorrectly. According to that, it appears that your VPN
> client side isn't offering a connection setup that the server accepts. Make
> sure you have the right configuration.
Specifically, I think it means that either the phase 1 and phase 2
algorithms proposed weren't accepted by the server, or the routes specified
in your configuration aren't acceptable.
For an ipsec/l2tp connection, you don't need to add routes to the ipsec
connection, or use it as the default route. The routing will be
handled/specified in the l2tp layer.
Thanks, Gordon. I think you were right: it seems that default phase 1
and phase 2 algorithms were not accepted by the server. I changed the
algorithms, but still not able to establish the connection. The logs
are below.
Paul
-------------------------
Jul 04 11:12:41 xhost NetworkManager[911]: <info> [1530699161.9279]
audit: op="connection-activate"
uuid="915d709a-49b3-4928-8d5e-0f7e7a4de99a" name="FEP VPN 3" pid=1564
uid=1000 result="success"
Jul 04 11:12:41 xhost NetworkManager[911]: <info> [1530699161.9371]
vpn-connection[0x56336f4382e0,915d709a-49b3-4928-8d5e-0f7e7a4de99a,"FEP
VPN 3",0]: Started the VPN service, PID 9514
Jul 04 11:12:41 xhost NetworkManager[911]: <info> [1530699161.9473]
vpn-connection[0x56336f4382e0,915d709a-49b3-4928-8d5e-0f7e7a4de99a,"FEP
VPN 3",0]: Saw the service appear; activating connection
Jul 04 11:12:42 xhost NetworkManager[911]: <info> [1530699162.0548]
vpn-connection[0x56336f4382e0,915d709a-49b3-4928-8d5e-0f7e7a4de99a,"FEP
VPN 3",0]: VPN connection: (ConnectInteractive) reply received
Jul 04 11:12:42 xhost nm-l2tp-service[9514]: Check port 1701
Jul 04 11:12:42 xhost NetworkManager[911]: Redirecting to: systemctl
stop ipsec.service
Jul 04 11:12:42 xhost NetworkManager[911]: warning: could not open
include filename: '/etc/ipsec.d/*.conf'
Jul 04 11:12:42 xhost libipsecconf[9544]: warning: could not open
include filename: '/etc/ipsec.d/*.conf'
Jul 04 11:12:42 xhost NetworkManager[911]: warning: could not open
include filename: '/etc/ipsec.d/*.conf'
Jul 04 11:12:42 xhost libipsecconf[9549]: warning: could not open
include filename: '/etc/ipsec.d/*.conf'
Jul 04 11:12:42 xhost NetworkManager[911]: warning: could not open
include filename: '/etc/ipsec.d/*.conf'
Jul 04 11:12:42 xhost libipsecconf[9562]: warning: could not open
include filename: '/etc/ipsec.d/*.conf'
Jul 04 11:12:42 xhost NetworkManager[911]: warning: could not open
include filename: '/etc/ipsec.d/*.conf'
Jul 04 11:12:42 xhost libipsecconf[9567]: warning: could not open
include filename: '/etc/ipsec.d/*.conf'
Jul 04 11:12:42 xhost NetworkManager[911]: Redirecting to: systemctl
start ipsec.service
Jul 04 11:12:43 xhost NetworkManager[911]: 002 listening for IKE messages
Jul 04 11:12:43 xhost NetworkManager[911]: 002 adding interface
enp3s0/enp3s0 192.168.1.4:500
Jul 04 11:12:43 xhost NetworkManager[911]: 002 adding interface
enp3s0/enp3s0 192.168.1.4:4500
Jul 04 11:12:43 xhost NetworkManager[911]: 002 adding interface lo/lo
127.0.0.1:500
Jul 04 11:12:43 xhost NetworkManager[911]: 002 adding interface lo/lo
127.0.0.1:4500
Jul 04 11:12:43 xhost NetworkManager[911]: 002 adding interface lo/lo ::1:500
Jul 04 11:12:43 xhost NetworkManager[911]: 002 loading secrets from
"/etc/ipsec.secrets"
Jul 04 11:12:43 xhost NetworkManager[911]: 002 loading secrets from
"/etc/ipsec.d/nm-l2tp-ipsec-06788735-e3e9-4051-a515-c7d9ed14aee7.secrets"
Jul 04 11:12:43 xhost NetworkManager[911]: 003 WARNING: using a weak
secret (PSK)
Jul 04 11:12:43 xhost NetworkManager[911]: 002 loading secrets from
"/etc/ipsec.d/nm-l2tp-ipsec-915d709a-49b3-4928-8d5e-0f7e7a4de99a.secrets"
Jul 04 11:12:43 xhost NetworkManager[911]: 002 loading secrets from
"/etc/ipsec.d/nm-l2tp-ipsec-abea2bcd-c2b7-46a8-993d-0f44aa7d6075.secrets"
Jul 04 11:12:43 xhost NetworkManager[911]: 002 loading secrets from
"/etc/ipsec.d/nm-l2tp-ipsec-eea9d5c0-b3b5-4a28-83a1-13b0ced7f080.secrets"
Jul 04 11:12:44 xhost NetworkManager[911]: 002 listening for IKE messages
Jul 04 11:12:44 xhost NetworkManager[911]: 002 forgetting secrets
Jul 04 11:12:44 xhost NetworkManager[911]: 002 loading secrets from
"/etc/ipsec.secrets"
Jul 04 11:12:44 xhost NetworkManager[911]: 002 loading secrets from
"/etc/ipsec.d/nm-l2tp-ipsec-06788735-e3e9-4051-a515-c7d9ed14aee7.secrets"
Jul 04 11:12:44 xhost NetworkManager[911]: 003 WARNING: using a weak
secret (PSK)
Jul 04 11:12:44 xhost NetworkManager[911]: 002 loading secrets from
"/etc/ipsec.d/nm-l2tp-ipsec-915d709a-49b3-4928-8d5e-0f7e7a4de99a.secrets"
Jul 04 11:12:44 xhost NetworkManager[911]: 002 loading secrets from
"/etc/ipsec.d/nm-l2tp-ipsec-abea2bcd-c2b7-46a8-993d-0f44aa7d6075.secrets"
Jul 04 11:12:44 xhost NetworkManager[911]: 002 loading secrets from
"/etc/ipsec.d/nm-l2tp-ipsec-eea9d5c0-b3b5-4a28-83a1-13b0ced7f080.secrets"
Jul 04 11:12:45 xhost NetworkManager[911]: 002 listening for IKE messages
Jul 04 11:12:45 xhost NetworkManager[911]: 002 forgetting secrets
Jul 04 11:12:45 xhost NetworkManager[911]: 002 loading secrets from
"/etc/ipsec.secrets"
Jul 04 11:12:45 xhost NetworkManager[911]: 002 loading secrets from
"/etc/ipsec.d/nm-l2tp-ipsec-06788735-e3e9-4051-a515-c7d9ed14aee7.secrets"
Jul 04 11:12:45 xhost NetworkManager[911]: 003 WARNING: using a weak
secret (PSK)
Jul 04 11:12:45 xhost NetworkManager[911]: 002 loading secrets from
"/etc/ipsec.d/nm-l2tp-ipsec-915d709a-49b3-4928-8d5e-0f7e7a4de99a.secrets"
Jul 04 11:12:45 xhost NetworkManager[911]: 002 loading secrets from
"/etc/ipsec.d/nm-l2tp-ipsec-abea2bcd-c2b7-46a8-993d-0f44aa7d6075.secrets"
Jul 04 11:12:45 xhost NetworkManager[911]: 002 loading secrets from
"/etc/ipsec.d/nm-l2tp-ipsec-eea9d5c0-b3b5-4a28-83a1-13b0ced7f080.secrets"
Jul 04 11:12:46 xhost NetworkManager[911]: 002 listening for IKE messages
Jul 04 11:12:46 xhost NetworkManager[911]: 002 forgetting secrets
Jul 04 11:12:46 xhost NetworkManager[911]: 002 loading secrets from
"/etc/ipsec.secrets"
Jul 04 11:12:46 xhost NetworkManager[911]: 002 loading secrets from
"/etc/ipsec.d/nm-l2tp-ipsec-06788735-e3e9-4051-a515-c7d9ed14aee7.secrets"
Jul 04 11:12:46 xhost NetworkManager[911]: 003 WARNING: using a weak
secret (PSK)
Jul 04 11:12:46 xhost NetworkManager[911]: 002 loading secrets from
"/etc/ipsec.d/nm-l2tp-ipsec-915d709a-49b3-4928-8d5e-0f7e7a4de99a.secrets"
Jul 04 11:12:46 xhost NetworkManager[911]: 002 loading secrets from
"/etc/ipsec.d/nm-l2tp-ipsec-abea2bcd-c2b7-46a8-993d-0f44aa7d6075.secrets"
Jul 04 11:12:46 xhost NetworkManager[911]: 002 loading secrets from
"/etc/ipsec.d/nm-l2tp-ipsec-eea9d5c0-b3b5-4a28-83a1-13b0ced7f080.secrets"
Jul 04 11:12:47 xhost NetworkManager[911]: 002 listening for IKE messages
Jul 04 11:12:47 xhost NetworkManager[911]: 002 forgetting secrets
Jul 04 11:12:47 xhost NetworkManager[911]: 002 loading secrets from
"/etc/ipsec.secrets"
Jul 04 11:12:47 xhost NetworkManager[911]: 002 loading secrets from
"/etc/ipsec.d/nm-l2tp-ipsec-06788735-e3e9-4051-a515-c7d9ed14aee7.secrets"
Jul 04 11:12:47 xhost NetworkManager[911]: 003 WARNING: using a weak
secret (PSK)
Jul 04 11:12:47 xhost NetworkManager[911]: 002 loading secrets from
"/etc/ipsec.d/nm-l2tp-ipsec-915d709a-49b3-4928-8d5e-0f7e7a4de99a.secrets"
Jul 04 11:12:47 xhost NetworkManager[911]: 002 loading secrets from
"/etc/ipsec.d/nm-l2tp-ipsec-abea2bcd-c2b7-46a8-993d-0f44aa7d6075.secrets"
Jul 04 11:12:47 xhost NetworkManager[911]: 002 loading secrets from
"/etc/ipsec.d/nm-l2tp-ipsec-eea9d5c0-b3b5-4a28-83a1-13b0ced7f080.secrets"
Jul 04 11:12:48 xhost NetworkManager[911]: 002 listening for IKE messages
Jul 04 11:12:48 xhost NetworkManager[911]: 002 forgetting secrets
Jul 04 11:12:48 xhost NetworkManager[911]: 002 loading secrets from
"/etc/ipsec.secrets"
Jul 04 11:12:48 xhost NetworkManager[911]: 002 loading secrets from
"/etc/ipsec.d/nm-l2tp-ipsec-06788735-e3e9-4051-a515-c7d9ed14aee7.secrets"
Jul 04 11:12:48 xhost NetworkManager[911]: 003 WARNING: using a weak
secret (PSK)
Jul 04 11:12:48 xhost NetworkManager[911]: 002 loading secrets from
"/etc/ipsec.d/nm-l2tp-ipsec-915d709a-49b3-4928-8d5e-0f7e7a4de99a.secrets"
Jul 04 11:12:48 xhost NetworkManager[911]: 002 loading secrets from
"/etc/ipsec.d/nm-l2tp-ipsec-abea2bcd-c2b7-46a8-993d-0f44aa7d6075.secrets"
Jul 04 11:12:48 xhost NetworkManager[911]: 002 loading secrets from
"/etc/ipsec.d/nm-l2tp-ipsec-eea9d5c0-b3b5-4a28-83a1-13b0ced7f080.secrets"
Jul 04 11:12:48 xhost NetworkManager[911]: debugging mode enabled
Jul 04 11:12:48 xhost NetworkManager[911]: end of file
/var/run/nm-l2tp-ipsec-915d709a-49b3-4928-8d5e-0f7e7a4de99a.conf
Jul 04 11:12:48 xhost NetworkManager[911]: Loading conn
915d709a-49b3-4928-8d5e-0f7e7a4de99a
Jul 04 11:12:48 xhost NetworkManager[911]: Warning: obsolete keyword
'forceencaps' ignored
Jul 04 11:12:48 xhost NetworkManager[911]: starter: left is KH_DEFAULTROUTE
Jul 04 11:12:48 xhost NetworkManager[911]: conn:
"915d709a-49b3-4928-8d5e-0f7e7a4de99a" labeled_ipsec=0
Jul 04 11:12:48 xhost NetworkManager[911]: conn:
"915d709a-49b3-4928-8d5e-0f7e7a4de99a" modecfgdns=(null)
Jul 04 11:12:48 xhost NetworkManager[911]: conn:
"915d709a-49b3-4928-8d5e-0f7e7a4de99a" modecfgdomains=(null)
Jul 04 11:12:48 xhost NetworkManager[911]: conn:
"915d709a-49b3-4928-8d5e-0f7e7a4de99a" modecfgbanner=(null)
Jul 04 11:12:48 xhost NetworkManager[911]: conn:
"915d709a-49b3-4928-8d5e-0f7e7a4de99a" mark=(null)
Jul 04 11:12:48 xhost NetworkManager[911]: conn:
"915d709a-49b3-4928-8d5e-0f7e7a4de99a" mark-in=(null)
Jul 04 11:12:48 xhost NetworkManager[911]: conn:
"915d709a-49b3-4928-8d5e-0f7e7a4de99a" mark-out=(null)
Jul 04 11:12:48 xhost NetworkManager[911]: conn:
"915d709a-49b3-4928-8d5e-0f7e7a4de99a" vti_iface=(null)
Jul 04 11:12:48 xhost NetworkManager[911]: opening file:
/var/run/nm-l2tp-ipsec-915d709a-49b3-4928-8d5e-0f7e7a4de99a.conf
Jul 04 11:12:48 xhost NetworkManager[911]: loading named conns:
915d709a-49b3-4928-8d5e-0f7e7a4de99a
Jul 04 11:12:48 xhost NetworkManager[911]: seeking_src = 1,
seeking_gateway = 1, has_peer = 1
Jul 04 11:12:48 xhost NetworkManager[911]: seeking_src = 0,
seeking_gateway = 1, has_dst = 1
Jul 04 11:12:48 xhost NetworkManager[911]: dst via 192.168.1.1 dev
enp3s0 src table 254
Jul 04 11:12:48 xhost NetworkManager[911]: set nexthop: 192.168.1.1
Jul 04 11:12:48 xhost NetworkManager[911]: dst 192.168.1.0 via dev
enp3s0 src 192.168.1.4 table 254
Jul 04 11:12:48 xhost NetworkManager[911]: dst 127.0.0.0 via dev lo
src 127.0.0.1 table 255 (ignored)
Jul 04 11:12:48 xhost NetworkManager[911]: dst 127.0.0.1 via dev lo
src 127.0.0.1 table 255 (ignored)
Jul 04 11:12:48 xhost NetworkManager[911]: dst 127.255.255.255 via
dev lo src 127.0.0.1 table 255 (ignored)
Jul 04 11:12:48 xhost NetworkManager[911]: dst 192.168.1.0 via dev
enp3s0 src 192.168.1.4 table 255 (ignored)
Jul 04 11:12:48 xhost NetworkManager[911]: dst 192.168.1.4 via dev
enp3s0 src 192.168.1.4 table 255 (ignored)
Jul 04 11:12:48 xhost NetworkManager[911]: dst 192.168.1.255 via dev
enp3s0 src 192.168.1.4 table 255 (ignored)
Jul 04 11:12:48 xhost NetworkManager[911]: seeking_src = 1,
seeking_gateway = 0, has_peer = 1
Jul 04 11:12:48 xhost NetworkManager[911]: seeking_src = 1,
seeking_gateway = 0, has_dst = 1
Jul 04 11:12:48 xhost NetworkManager[911]: dst 192.168.1.1 via dev
enp3s0 src 192.168.1.4 table 254
Jul 04 11:12:48 xhost NetworkManager[911]: set addr: 192.168.1.4
Jul 04 11:12:48 xhost NetworkManager[911]: seeking_src = 0,
seeking_gateway = 0, has_peer = 1
Jul 04 11:12:48 xhost NetworkManager[911]: 002
"915d709a-49b3-4928-8d5e-0f7e7a4de99a" #1: initiating Main Mode
Jul 04 11:12:48 xhost NetworkManager[911]: 104
"915d709a-49b3-4928-8d5e-0f7e7a4de99a" #1: STATE_MAIN_I1: initiate
Jul 04 11:12:48 xhost NetworkManager[911]: 002
"915d709a-49b3-4928-8d5e-0f7e7a4de99a" #1: WARNING: connection
915d709a-49b3-4928-8d5e-0f7e7a4de99a PSK length of 0 bytes is too
short for sha PRF in FIPS mode (10 bytes required)
Jul 04 11:12:48 xhost NetworkManager[911]: 106
"915d709a-49b3-4928-8d5e-0f7e7a4de99a" #1: STATE_MAIN_I2: sent MI2,
expecting MR2
Jul 04 11:12:49 xhost NetworkManager[911]: <info> [1530699169.4418]
vpn-connection[0x56336f4382e0,915d709a-49b3-4928-8d5e-0f7e7a4de99a,"FEP
VPN 3",0]: VPN plugin: state changed: stopped (6)
Jul 04 11:12:49 xhost NetworkManager[911]: <info> [1530699169.4443]
vpn-connection[0x56336f4382e0,915d709a-49b3-4928-8d5e-0f7e7a4de99a,"FEP
VPN 3",0]: VPN service disappeared
Jul 04 11:12:49 xhost NetworkManager[911]: <warn> [1530699169.4459]
vpn-connection[0x56336f4382e0,915d709a-49b3-4928-8d5e-0f7e7a4de99a,"FEP
VPN 3",0]: VPN connection: failed to connect: 'Message recipient
disconnected from message bus without replying'